Skip to content

Instantly share code, notes, and snippets.

@mattwoolnough

mattwoolnough/create-keystore.sh

Last active May 28, 2017 02:54
Show Gist options
  • Save mattwoolnough/4ac2725a56c8d3f6fcb62ee68552dda1 to your computer and use it in GitHub Desktop.
Save mattwoolnough/4ac2725a56c8d3f6fcb62ee68552dda1 to your computer and use it in GitHub Desktop.
Download ZIP
Keycloak Certs
Raw
create-keystore.sh
#!/bin/sh
DOMAIN=<domain>
KEYSTOREPW=<changeme>
GFDOMAIN=/opt/keycloak-3.1.0.Final/standalone/configuration/
LIVE=/etc/letsencrypt/live/$DOMAIN
sudo openssl pkcs12 -export -in $LIVE/cert.pem -inkey $LIVE/privkey.pem -out cert_and_key.p12 -name myalias -CAfile $LIVE/chain.pem -caname root -password pass:$KEYSTOREPW
sudo keytool -importkeystore -destkeystore keystore.jks -srckeystore cert_and_key.p12 -srcstoretype PKCS12 -alias myalias -srcstorepass $KEYSTOREPW -deststorepass $KEYSTOREPW -destkeypass $KEYSTOREPW
sudo keytool -import -noprompt -trustcacerts -alias root -file $LIVE/chain.pem -keystore keystore.jks -srcstorepass $KEYSTOREPW -deststorepass $KEYSTOREPW -destkeypass $KEYSTOREPW
sudo openssl pkcs12 -export -in $LIVE/fullchain.pem -inkey $LIVE/privkey.pem -out pkcs.p12 -name keycloak -password pass:$KEYSTOREPW
sudo keytool -importkeystore -destkeystore keystore.jks -srckeystore pkcs.p12 -srcstoretype PKCS12 -alias keycloak -srcstorepass $KEYSTOREPW -deststorepass $KEYSTOREPW -destkeypass $KEYSTOREPW
sudo keytool -list -keystore keystore.jks -storepass $KEYSTOREPW
mv keystore.jks $GFDOMAIN/keycloak.jks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment